GravityHexa

Email DNS Checker

Look up a domain's MX, SPF, DMARC and DKIM records together, and say which are missing rather than guessing.

The domain part of your email addresses — example.com, not mail.example.com.

20 runs left today · sign up for more

About this tool

Looks up everything a domain publishes about its own mail — MX, SPF, DMARC and the DKIM selectors the common providers use — and reports them together.

Together is the point. These are four separate records, and a deliverability problem is nearly always one of them missing while everybody assumed it was there. Checking them one at a time is how a domain ends up with a carefully maintained SPF record and no DMARC at all.

**A failed lookup is not an absent record**, and the two are reported differently. "No SPF record is published" is a statement about somebody's mail configuration that gets acted on; saying it because a query timed out is worse than saying nothing. Where a lookup does not complete, this says so.

DKIM is checked against the selectors the common providers use. A domain using a custom selector will show none found, which does not mean it has none — the tool says that rather than implying otherwise.

Common questions

Which of these do I actually need?

MX to receive mail. SPF and DKIM so recipients can verify what you send. DMARC to tell them what to do when verification fails, and to get reports. Google and Yahoo have required all four from bulk senders since 2024.

Why does my DKIM show as not found?

Because DKIM lives at a selector name that only your provider knows. The common ones are tried here; a custom selector will not be among them. Your sending platform's settings page shows which yours uses.

I have SPF and DKIM. Why is mail still going to spam?

Authentication is necessary and not sufficient. Reputation, list hygiene, complaint rate and content all matter. What these records do is stop you failing at the first gate; passing it does not guarantee the inbox.

Should I add SPF for a domain that sends no mail?

Yes. A parked domain with "v=spf1 -all" and a DMARC record at p=reject cannot be spoofed. Domains that send nothing are attractive precisely because nobody is watching them.